David Goulet 88901c3967 Fix: mitigate as much as we can HS port scanning ...

Make hidden service port scanning harder by sending back REASON_DONE which
does not disclose that it was in fact an exit policy issue. After that, kill
the circuit immediately to avoid more bad requests on it.

This means that everytime an hidden service exit policy does match, the user
(malicious or not) needs to build a new circuit.

Fixes #13667.

Signed-off-by: David Goulet <dgoulet@ev0ke.net>

2014-12-29 16:29:09 -05:00

..

13295

Don't use the getaddrinfo sandbox cache from tor-resolve

2014-09-29 12:57:07 -04:00

bufferevent_compilation

update changes entry with info for 11578 patch

2014-07-21 14:00:10 -04:00

bug1038-3

Warn and drop the circuit if we receive an inbound 'relay early' cell

2014-07-28 02:44:05 -04:00

bug8093

Downgrade 'unexpected sendme cell from client' to PROTOCOL_WARN

2014-10-16 13:04:11 -04:00

bug8387

Fix a bug where streams would linger forever when we had no dirinfo

2014-07-09 16:15:05 -04:00

bug11200-caching

Build circuits more readily when DisableNetwork goes to 0

2014-08-06 18:30:14 -04:00

bug12160

Correctly update channel local mark when address of incoming connection changes after handshake; fixes bug #12160

2014-09-05 11:12:08 -07:00

bug12602

Fix compilation with no-compression OpenSSL builds and forks

2014-07-17 11:25:56 +02:00

bug12700

Fix relay_command_to_string(); solve 12700.

2014-08-18 13:21:40 -04:00

bug12718

add a changes file for bug 12718

2014-07-27 15:41:30 -04:00

bug12730-systemd-verify-config

Verify configuration file via ExecStartPre in the systemd unit file (#12730).

2014-07-30 16:56:55 +00:00

bug12731-systemd-no-run-as-daemon

Explicitly disable RunAsDaemon in the systemd unit file (#12731).

2014-07-30 16:54:07 +00:00

bug12830

Fix some URLs in the README

2014-08-09 15:57:44 -04:00

bug12848

Don't send DESTROY to circID 0 when circuit_deliver_create_cell fails

2014-08-12 12:12:02 -04:00

bug12864

Restore functionality for CookieAuthFileGroupReadable.

2014-08-15 08:30:44 -04:00

bug12878

Adding changes file.

2014-09-01 16:22:52 -04:00

bug12908

Warn if Tor is a relay and a HS

2014-08-20 12:56:57 -04:00

bug12948

Resume expanding abbreviations for command-line options

2014-08-28 08:33:43 -04:00

bug12996

Downgrade "Unexpected onionskin length after decryption" warning

2014-08-29 16:38:54 -04:00

bug12997

Improve "Tried to establish rendezvous on non-OR or non-edge circuit"

2014-08-29 16:05:58 -04:00

bug13071

Add more escaped() calls in directory.c

2014-09-09 10:22:01 -04:00

bug13081

Clean up the MVSC nmake files so they work again.

2014-09-09 10:27:05 -04:00

bug13085

Expand the event_mask field in controller conns to 64 bits

2014-09-08 15:16:02 -04:00

bug13096

In routerlist_assert_ok(), check r2 before taking &(r2->cache_info)

2014-09-10 23:48:11 -04:00

bug13100

gabelmoo's IPv4 address changed

2014-09-20 16:46:02 -04:00

bug13124

Reduce log severity for unused ClientTransportPlugin lines

2014-09-11 08:02:37 -04:00

bug13151-client

clients now send correct address for rendezvous point

2014-09-16 11:05:36 -04:00

bug13296

Add changes file for #13926

2014-11-12 15:25:52 -05:00

bug13325

Run correctly on OpenBSD systems without SSL_METHOD.get_cipher_by_char

2014-10-03 12:15:09 -04:00

bug13471

Note that our #13426 fix is also a #13471 fix.

2014-10-19 15:38:44 -04:00

bug13667

Fix: mitigate as much as we can HS port scanning

2014-12-29 16:29:09 -05:00

bug14013

whoops; missing changes file for 14013

2014-12-23 10:55:25 -05:00

curve25519-donna32-bug

Put the bug number and correct credits in the changes file for the new curve25519-donna32

2014-07-23 21:25:53 -04:00

disable_sslv3

Disable SSLv3 unconditionally. Closes ticket 13426.

2014-10-15 11:50:05 -04:00

further-12184-diagnostic

diagnostic for 12184: Add a call to channel_dump_statistics

2014-07-16 10:34:39 +02:00

geoip6-august2014

Update geoip6 to the August 7 2014 database.

2014-08-13 16:16:11 +02:00

geoip6-july2014

Update geoip6 to the July 10 2014 database.

2014-07-18 16:31:25 +02:00

geoip6-november2014

Update geoip6 to the November 15 2014 database.

2014-11-24 14:23:18 +01:00

geoip-august2014

Update geoip to the August 7 2014 database.

2014-08-13 16:08:33 +02:00

geoip-july2014

Update geoip to the July 10 2014 database.

2014-07-18 16:28:50 +02:00

geoip-november2014

Update geoip to the November 15 2014 database.

2014-11-24 14:21:31 +01:00

test.h_msvc

Apply an MSVC compilation fix from Gisle Vanem

2014-08-13 15:11:00 -04:00

ticket12688

add a NumDirectoryGuards consensus param too

2014-07-24 16:19:47 -04:00

ticket12690

Raise guard threshold to top 25% or 2000 kilounits

2014-07-24 16:24:17 -04:00

ticket13036

Fix a number of clang analyzer false-positives

2014-09-02 11:56:56 -04:00